Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1710/18229A86826B11ECA11BA52BC4F9AE02/NPs4YMs0-seCIJnB-5kfzfY8hs0.mft
File:                     NPs4YMs0-seCIJnB-5kfzfY8hs0.mft (raw, json)
Hash identifier:          N997LMZBUdzsW+t1BpxQVAUltWs5DUveSN/4HKg4/7k=
Subject key identifier:   9A:96:6E:60:65:D5:0C:58:77:F1:8E:FB:9F:75:B4:AE:67:E7:21:CD
Authority key identifier: 34:FB:38:60:CB:34:FA:C7:82:20:99:C1:FB:99:1F:CD:F6:3C:86:CD
Certificate issuer:       /CN=A91C1710/serialNumber=34FB3860CB34FAC7822099C1FB991FCDF63C86CD
Certificate serial:       03D5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NPs4YMs0-seCIJnB-5kfzfY8hs0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C1710/18229A86826B11ECA11BA52BC4F9AE02/NPs4YMs0-seCIJnB-5kfzfY8hs0.mft
Manifest number:          0701
Signing time:             Fri 25 Apr 2025 00:23:10 +0000
Manifest this update:     Fri 25 Apr 2025 00:23:09 +0000
Manifest next update:     Fri 02 May 2025 00:23:09 +0000
Files and hashes:         1: NPs4YMs0-seCIJnB-5kfzfY8hs0.crl (hash: 9u7MY8y14VLv6k7UTQR4KZxh62dL6OHsZKhHWK83ih0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C1710/18229A86826B11ECA11BA52BC4F9AE02/NPs4YMs0-seCIJnB-5kfzfY8hs0.crl
                          rsync://rpki.apnic.net/member_repository/A91C1710/18229A86826B11ECA11BA52BC4F9AE02/NPs4YMs0-seCIJnB-5kfzfY8hs0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NPs4YMs0-seCIJnB-5kfzfY8hs0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 May 2025 00:23:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 981 (0x3d5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C1710, serialNumber=34FB3860CB34FAC7822099C1FB991FCDF63C86CD
        Validity
            Not Before: Apr 25 00:23:09 2025 GMT
            Not After : May  2 00:23:09 2025 GMT
        Subject: CN=680ad5ed-feab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:51:3c:bf:32:a1:f8:2a:76:c1:90:b0:74:b5:
                    9d:a0:e3:fc:79:c1:34:2a:10:f5:08:ba:d8:09:30:
                    2e:d4:86:a6:24:da:99:fe:d6:c7:ab:cf:86:65:66:
                    05:71:ae:12:0b:9e:ac:7d:87:e9:bd:fb:70:88:81:
                    04:bc:58:fd:90:d3:40:67:30:5f:84:a3:11:d2:3e:
                    31:d1:0d:45:80:4d:db:9b:4f:53:bc:c1:e4:d2:ac:
                    9e:df:a0:9c:07:81:15:3c:14:8f:cd:93:05:34:c7:
                    7e:73:da:d9:73:5c:73:22:4e:f6:da:7c:77:b2:c1:
                    b8:46:8f:9b:ba:5a:bb:ff:f0:0b:6f:49:91:b3:86:
                    ec:13:ef:30:86:bc:9a:be:41:07:b2:b1:e7:12:cf:
                    bb:2f:e2:54:34:11:7f:76:13:0a:26:72:32:80:15:
                    f4:a9:17:ce:27:03:63:13:fa:68:f5:ed:da:d8:db:
                    57:09:78:62:12:63:3c:df:09:a0:34:f9:e4:d6:be:
                    c2:83:b6:fc:48:41:85:62:4f:df:11:40:ba:9a:0e:
                    67:e3:25:de:55:4b:dd:94:b2:d2:44:45:b4:aa:4c:
                    a7:2e:87:b3:83:3c:f8:e6:32:45:7d:fd:5d:7a:b6:
                    fe:93:38:94:c7:64:c6:6f:30:a9:ff:26:69:a8:b6:
                    ac:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:96:6E:60:65:D5:0C:58:77:F1:8E:FB:9F:75:B4:AE:67:E7:21:CD
            X509v3 Authority Key Identifier:
                keyid:34:FB:38:60:CB:34:FA:C7:82:20:99:C1:FB:99:1F:CD:F6:3C:86:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C1710/18229A86826B11ECA11BA52BC4F9AE02/NPs4YMs0-seCIJnB-5kfzfY8hs0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NPs4YMs0-seCIJnB-5kfzfY8hs0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1710/18229A86826B11ECA11BA52BC4F9AE02/NPs4YMs0-seCIJnB-5kfzfY8hs0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:18:5a:b3:61:74:23:51:64:83:0d:88:ef:86:a0:f6:f8:b5:
         c6:00:20:b1:38:34:b1:0e:8f:03:a8:c0:f9:50:c4:71:e7:97:
         33:3a:47:e5:6c:c9:38:76:18:43:71:14:40:3d:29:41:5a:5b:
         99:0b:d5:59:05:e6:b6:18:2a:d0:b8:96:e5:18:35:cf:75:a4:
         cb:c9:49:36:de:29:bf:9e:31:de:9b:18:70:c7:fb:30:f5:f6:
         7d:0f:8e:37:2b:a9:c3:62:3d:26:a4:44:ef:b1:0f:d0:97:09:
         63:fb:61:12:ce:59:ac:cc:f3:3f:a3:79:d3:59:e6:54:c0:ac:
         de:12:e9:1c:e9:46:b9:50:8b:ff:97:60:cd:3f:cb:3e:e7:d7:
         f9:2f:e9:d4:70:0c:13:bc:77:6b:ef:ca:53:ec:12:19:9c:80:
         35:f8:e6:ee:37:8c:19:52:dc:0e:14:79:ee:f1:93:b1:af:4f:
         d9:1d:55:f9:f5:d7:31:69:dc:c5:f3:ff:1b:bc:0a:af:5b:87:
         4f:8b:b8:ac:35:86:37:35:be:90:bf:e6:4c:f6:67:fd:cb:43:
         2a:38:2f:4a:a6:97:45:49:1d:88:27:f9:5c:69:71:fb:d8:c2:
         82:cc:69:3d:05:e8:6a:7f:bb:1c:10:60:c6:7a:dd:9f:48:c2:
         28:e9:85:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:19:16 2025 by rpki-client